skills/mukul975/anthropic-cybersecurity-skills/performing-soc2-type2-audit-preparation/Gen Agent Trust Hub
performing-soc2-type2-audit-preparation
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with official APIs of well-known services such as GitHub, AWS, Okta, and PagerDuty to retrieve compliance evidence and audit logs.
- [COMMAND_EXECUTION]: Executes Python scripts that utilize
boto3andrequeststo perform network operations and infrastructure assessment logic. - [INDIRECT_PROMPT_INJECTION]: The skill presents an ingestion surface for untrusted data retrieved from external APIs during evidence collection.
- Ingestion points: Data is ingested from AWS (IAM, CloudTrail, S3), GitHub (PR details), and third-party compliance platforms in
scripts/agent.pyandSKILL.md. - Boundary markers: No explicit delimiters or boundary markers are defined for the ingested API data.
- Capability inventory: The skill is capable of local file writes for reporting and network read operations via standard libraries.
- Sanitization: The skill does not perform specific sanitization on the data retrieved from external service providers.
Audit Metadata